|
DNSSEC ensures that requests to visit an Internet web site reach the intended destination. DNSSEC protects against security vulnerabilities such as DNS cache poisoning, pharming and DNS redirection, commonly exploited to commit fraud and criminal attacks.
 How DNS Works The original design of the Domain Name System (DNS) did not include security; instead it was designed to be a scalable distributed system. The Domain Name System Security Extensions (DNSSEC) attempts to add security, while maintaining backwards compatibility.
DNSSEC was designed to protect Internet resolvers (clients) from forged DNS data, such as that created by DNS cache poisoning. All answers in DNSSEC are digitally signed. By checking the digital signature, a DNS resolver is able to check if the information is identical (correct and complete) to the information on the authoritative DNS server. While protecting IP addresses is the immediate concern for many users, DNSSEC can protect other information such as general-purpose cryptographic certificates stored in CERT records in the DNS.
2020Media.com rolled out Secure DNS (DNSSEC) in 2010 to coincide with the signing of the root. With the latest DNS servers running secure DNS software, our customers can be more secure on the internet than ever before.
For more information about Secure DNS, please contact us.
|